4555aff Ticket 362 - Directory Console generates insufficient key strength

Authored and Committed by nkinder 11 years ago
    Ticket 362 - Directory Console generates insufficient key strength
    
    The security CGI that is called by the Console is limited terms of
    key generation and the signing algorithm used for the request.  The
    RSA key size is limited to 1024 bit or less, and the signing algorithm
    is hardcoded to MD5.
    
    This patch increases the maximum RSA key size to 4096 and uses a
    default of 2048 if the caller doesn't specify a key size.  The default
    signing algorithm is changed to SHA-1, and a new CGI parameter has been
    added to allow the caller to alternatively choose SHA-256, SHA-384, or
    SHA-512.
    
        
file modified
+25 -9